From: Hirokazu MORIKAWA <redacted>
Date: Sun, 2 Aug 2026 01:01:48 +0000 (+0900)
Subject: node: bump to 22.23.2
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=a8b6b3b5519331ba1edde8a903050fbd362d4b9a;p=openwrt-packages.git

node: bump to 22.23.2

This is a security release.
Notable Changes
* (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
* (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
* (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
* (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
* (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
* (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
* (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
* (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
* (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
* (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
* deps: update llhttp to 9.4.3 (Paolo Insogna)
* deps: update undici to 6.28.0 (Node.js GitHub Bot)

Signed-off-by: Hirokazu MORIKAWA <redacted>
---

diff --git a/lang/node/Makefile b/lang/node/Makefile
index 80f644305..a22cb5462 100644
--- a/lang/node/Makefile
+++ b/lang/node/Makefile
@@ -8,15 +8,15 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=node
-PKG_VERSION:=22.23.0
+PKG_VERSION:=22.23.2
 PKG_RELEASE:=1
 NODE_MODULE_VERSION:=127
 
 PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://nodejs.org/dist/v$(PKG_VERSION)
-PKG_HASH:=61fd42cd1c3ff04a849f5ad5d08c58b111831944b5b94bc90fc623eab41418a2
+PKG_HASH:=cdaed46fcd8923a55974b7bbc7caaadeaaf7aed60cc137e59837b72f575ef641
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-v$(PKG_VERSION)
-NODEJS_BIN_SUM:=535eeb608ca1e0b71d49a0e36991d449d5f935fbb04eca61677519b010cd673a
+NODEJS_BIN_SUM:=b294a556e639d64338823920e5866c21c02741742d2e1529ee1a225c1ec9252a
 HOST_BUILD_DIR:=$(BUILD_DIR_HOST)/$(PKG_NAME)-v$(PKG_VERSION)
 
 PKG_MAINTAINER:=Hirokazu MORIKAWA <morikw2@gmail.com>, Adrian Panella <ianchi74@outlook.com>